Monitoring system, monitoring camera, and management device

ABSTRACT

There is provided a monitoring system which includes a plurality of monitoring cameras and a management device. The management device transmits feature information relevant to a person to one or more first monitoring cameras and receives check results, and transmits time information in which the person is captured to second monitoring cameras based on the check results. The management device specifies the person based on a check result acquired in such a way that the second monitoring cameras perform a check using the time information.

BACKGROUND 1. Technical Field

The present disclosure relates to a monitoring system, a monitoringcamera, and a management device.

2. Description of the Related Art

In recent years, incidents, such as kidnapping, lost child, andsnatching, frequently occur. Therefore, a plurality of monitoringcameras are installed in roads and buildings in a district. In a casewhere the plurality of monitoring cameras are installed, the incidentsare prevented from occurring or the incidents are early resolved basedon videos captured by the plurality of monitoring cameras.

As the related art, a monitoring system is known in which eachmonitoring camera transmits a still image to a host device, and the hostdevice performs a facial check between the received still image and afacial image of a database and requests the monitoring camera for amoving image based on a check result (for example, refer to JapanesePatent Unexamined Publication No. 2005-323046). In the monitoringsystem, the monitoring camera cuts the facial image and transmits thecut facial image, and the host device performs a face checking processusing the facial image and transmits the transmission request of themoving image to the monitoring camera.

However, in the related art, the monitoring camera transmits the stillimage to the host device (management device), and the host deviceperforms the face check. Therefore, a processing load is large in thehost device. For example, in a case where the host device receives stillimages from the plurality of monitoring cameras, which are installed inthe district and performs the face check, the processing load relevantto the face check performed by the host device is large, and thus thereis a possibility that process delay occurs. In a case where a processingresult is rapidly required, it is conceivable that it is difficult toperform rapid treatment in a technology disclosed in Japanese PatentUnexamined Publication No. 2005-323046.

SUMMARY

The present disclosure is made in consideration of the above-mentionedcircumstances, and provides a monitoring system, a monitoring camera,and a management device, in which it is possible to reduce a processingload of the management device and to rapidly detect a specific person.

According to the present disclosure, there is provided a monitoringsystem including: a plurality of monitoring cameras that capture images;and a management device that is connected to the monitoring cameras. Themanagement device transmits first feature information relevant to afirst person to one or more first monitoring cameras. Each of the firstmonitoring cameras performs a first check with respect to a first image,which is captured by the first monitoring cameras, using the receivedfirst feature information, and transmits a first check result to themanagement device. The management device transmits time informationbased on time, in which the first image including the first person iscaptured, to second monitoring cameras, which capture the first imagerelevant to the time information, among the first monitoring camerasbased on the first check result. Each of the second monitoring camerasperforms a second check with respect to a second image, which iscaptured by the second monitoring cameras, using the received timeinformation, and transmits a second check result to the managementdevice. The management device specifies a second person based on thesecond check result.

According to the present disclosure, there is provided a monitoringcamera which is connected to a management device and captures an image.The monitoring camera includes an image sensor, a processor, and acommunication device. The image sensor captures an image of a firstperson. The processor detects a feature quantity of the first personfrom the image. The communication device receives first featureinformation relevant to the first person from the management device. Theprocessor performs a first check of checking the first featureinformation and the feature quantity of the first person. Thecommunication device transmits a first check result to the managementdevice.

According to the present disclosure, there is provided a managementdevice, which is connected to monitoring cameras, including: aprocessor; and a communication device. The communication devicetransmits first feature information relevant to a first person to one ormore first monitoring cameras, receives a first check result using thefirst feature information from each of the first monitoring cameras,transmits time information based on time, in which a first imageincluding the first person is captured, to second monitoring cameras,which capture the first image including the first person, among thefirst monitoring cameras based on the first check result, receives asecond check result from the second monitoring cameras using the timeinformation. The processor specifies a second person based on the secondcheck result.

According to the present disclosure, it is possible to reduce aprocessing load of the management device and it is possible to rapidlydetect a specific person.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a diagram illustrating an example of a schematic configurationof a monitoring system according to an embodiment;

FIG. 2 is a schematic diagram illustrating a three-dimensional map of anarea where a plurality of monitoring cameras are installed;

FIG. 3 is a block diagram illustrating an example of a configuration ofeach of the monitoring cameras;

FIG. 4 is a block diagram illustrating an example of a configuration ofa management device installed in a head office;

FIG. 5 is a sequence diagram illustrating an example of an operation ofthe monitoring system;

FIG. 6 is a sequence diagram illustrating an example of the operation ofthe monitoring system subsequent to FIG. 5;

FIG. 7 is a diagram illustrating an example of map information, in whicha check result with respect to a feature quantity of a victim isreflected, in a time series;

FIG. 8 is a table illustrating an example of a victim list in a highfrequency area;

FIG. 9 is a table illustrating an example of a same person list;

FIG. 10 is a diagram illustrating an example of the map information; and

FIG. 11 is a table illustrating an example of a suspect list in the highfrequency area.

DETAILED DESCRIPTION

Hereinafter, embodiments will be appropriately described in detail withreference to the accompanying drawings. However, there is a case wheredescription, which is detailed more than need, is omitted. For example,there is a case where detailed description of already well-known itemsand repeated description with respect to substantially the sameconfiguration are omitted. The reason for this is to avoid descriptionbelow from being unnecessarily redundancy and to make those skilled inthe art to easily understand. Also, the accompanying drawings anddescription below are provided such that those skilled in the artsufficiently understand the present disclosure but do not intend tolimit subjects disclosed in claims.

First Embodiment [Configuration or the Like]

FIG. 1 is a diagram illustrating a schematic configuration of monitoringsystem 5 according to a first embodiment. Monitoring system 5 includes aplurality of monitoring cameras 10 which are installed for each of areasRA, RB, and RC, and management device 30 which is installed in headoffice HO. The plurality of monitoring cameras 10 are connected tomanagement device 30 through network 50 such that data communication ispossible.

Here, areas RA, RB, and RC indicate predetermined districts, forexample, regions of a city. An arbitrary method is used to determine thedistricts.

In addition, the plurality of monitoring cameras 10, which capture avideo in area RA, are distinguished as monitoring cameras 10A-1, 10A-2,. . . , 10A-n (n is an arbitrary integer). In the same manner, theplurality of monitoring cameras 10, which capture a video in area RB,are distinguished as monitoring cameras 10B-1, 10B-2, . . . , 10B-n, andthe plurality of monitoring cameras 10, which captures video in area RC,are distinguished as monitoring cameras 10C-1, 10C-2, . . . , 10C-n.Meanwhile, in a case where the monitoring cameras are distinguished forrespective districts, the monitoring cameras are referred to asmonitoring camera 10A, monitoring camera 10B, and monitoring camera 10C.In addition, in a case where it is not particularly necessary todistinguish the monitoring cameras for the respective districts, themonitoring cameras are generally named as monitoring cameras 10. Thenumber of monitoring cameras 10 which are installed for each district isnot particularly limited, and may be an arbitrary number.

In addition, head office HO includes, for example, a police station, amunicipal office, a prosecutor's office, and the like. Head office HOmay be installed in a district of any one of areas RA, RB, and RC, ormay be installed on the outside of areas RA, RB, and RC. Here, a case inwhich head office HO is installed in area RA is illustrated.

FIG. 2 is a diagram illustrating a three-dimensional map of area RA inwhich the plurality of monitoring cameras 10A are installed. In a town,in which a plurality of buildings are arranged, of area RA, theplurality of (here, nine) monitoring cameras 10A-1 to 10A-9 areinstalled. Monitoring cameras 10A-1 to 10A-9 are connected to managementdevice 30 in head office HO, respectively, through network 50.

FIG. 3 is a block diagram illustrating a configuration of each ofmonitoring cameras 10. As described above, monitoring cameras 10 areinstalled in each of areas RA, RB, and RC, capture prescribed capturingranges as subjects, and transmit feature quantities of images andinformation of various check results to management device 30 of headoffice HO based on video signals. In addition, each of monitoringcameras 10 receives information, such as a search key, from managementdevice 30. Each of monitoring cameras 10 includes image sensor 11, lens12, processor 13, memory 14, and communication device 15.

Lens 12 forms an optical image of a subject on an image capturingsurface of image sensor 11. Lens 12 may include a fish-eye lens whichcaptures a fish-eye image, a capturing lens in which lens magnificationis set such that the prescribed capturing range is captured, a zoom lenswhich can change a magnification of the lens, and the like.

Image sensor 11 includes a sensor substrate on which an image capturingelement, such as a complementary Metal Oxide Semiconductor (CMOS) or aCharge Coupled Device (CCD), is mounted. Image sensor 11 captures theoptical image formed by lens 12, generates an electric signal (videosignal), and outputs the video signal. In addition, together with imagesensor 11 or instead of image sensor 11, at least one of a distancesensor, a temperature sensor, an infrared sensor, and a radio wavesensor may be used.

Processor 13 includes, for example, a Central Processing Unit (CPU), aDigital Signal Processor (DSP), and a Graphics Processing Unit (GPU).

Processor 13 controls an operation of each of monitoring cameras 10 byexecuting a program maintained in memory 14, and has functions offeature detector 21 and feature checker 22.

Feature detector 21 extracts a feature quantity, such as a face, acolor, height, a thumbnail image (for example, a facial image or afull-length image), a type of a vehicle, or a vehicle number, from animage based on the video signal which is output from image sensor 11. Inaddition, the feature quantity may include information (metadata)relevant to capturing, such as an image capturing time and a capturingplace, based on the video signal.

Feature checker 22 checks the feature quantity which is extracted byfeature detector 21 and the feature quantity which is stored in featurestorage unit 24, and performs matching between the feature quantities,and determines consistency (coincidence) or inconsistency using, forexample, a threshold. For example, in a case where the number of featurepoints, which are consistent in two thumbnail images, is equal to orgreater than a prescribed threshold, it is determined that the imagesare consistent. In addition, in a case where a difference between twofeature quantities which indicate height is equal to or less than theprescribed threshold, it is determined that both images are consistent.A check which is performed by feature checker 22 includes, for example,a victim check, a time check, and a suspect check which will bedescribed later.

Memory 14 includes a primary storage device such as a Read Only Memory(ROM) or a Random Access Memory (RAM). In addition, memory 14 mayinclude a secondary storage device, such as a Hard Disk Memory (HDD) ora Solid State Drive (SSD), and a tertiary storage device such as a USBmemory or an SD card. Memory 14 stores various data, and includes videostorage unit 23, feature storage unit 24, and search key storage unit25.

Video storage unit 23 stores images based on the video signal which iscaptured by image sensor 11.

Feature storage unit 24 stores the feature quantity which is extractedby feature detector 21. For example, feature detector 21 extracts thefeature quantities of entire or some people included in the image basedon the video signal. Feature storage unit 24 may store the extractedfeature quantities for respective people.

Search key storage unit 25 stores a check search key which istransmitted from management device 30 of head office HO. The search keyincludes a face, a color, height, a thumbnail image (for example, afacial image or a full-length image), a type of a vehicle, a vehiclenumber, and the like, and corresponds to the feature quantity.

Communication device 15 includes a communication device, is connected tomanagement device 30 of head office HO through a wired line or awireless line, and communicates various data. Communication device 15may be connected to management device 30 through network 50, such as theInternet, or may be directly connected to management device 30 through adedicated line.

FIG. 4 is a block diagram illustrating a configuration of managementdevice 30. Management device 30 receives information, such as videosignals which are transmitted from monitoring cameras 10, performs aprocess of checking feature quantities from images based on the receivedvideo signals, and transmits the search key to monitoring cameras 10based on check results. Management device 30 includes, for example, ageneral-purpose PC (computer device) and a server. Management device 30includes communication device 31, processor 32, memory 37, input device38, and display 39.

Communication device 31 is connected to monitoring cameras 10, which areinstalled in each of the areas through a wired line or a wireless line,and communicates various data. Communication device 31 may be connectedto monitoring cameras 10 through network 50, such as the Internet, ormay be directly connected to monitoring cameras 10 through a dedicatedline. For example, communication device 31 transmits the search key tomonitoring cameras 10. In addition, communication device 31 receives thefeature quantities of the captured images or data relevant to the checkresults from monitoring cameras 10.

Processor 32 includes, for example, a CPU, a DSP, and a GPU. Processor32 controls an operation of management device 30 by executing a programmaintained in memory 37, and has functions of feature checker 33, highfrequency determination processor 34, list controller 35, and mapcontroller 36. Feature checker 33 checks a plurality of featurequantities, and performs, for example, a mutual check of checking thefeature quantities included in a plurality of images in round robinmanner. In the mutual check, for example, it is determined whether ornot people included in the plurality of images are the same person.

High frequency determination processor 34 determines a high frequencyarea according to a well-known clustering algorithm, such as a LatentDirichlet Allocation (LDA) and a Support Vector Machine (SVM), based onlocations (camera locations) in which monitoring cameras 10 areinstalled and results (for example, the check results from monitoringcameras 10) which are received by communication device 31. The LDA andthe SVM are, for example, a machine learning-type algorithm.

The high frequency area is, for example, an area where monitoringcameras 10, which capture images that are assumed to include the featurequantities of a victim or a suspect as the check results, areconcentrated (widespread) over a prescribed density. With regard to thecamera locations, for example, identification information (for example,camera number) of each of monitoring cameras 10 is associated withinstallation location information of each of monitoring cameras 10, andinformation acquired through the association is maintained in memory 14.

Map controller 36 generates map information based on a determinationresult of high frequency determination processor 34 and a check resultof feature checker 33, and displays the map information on display 39.The map illustrates camera locations of monitoring cameras 10, whichcapture the images (that is, images which include coinciding featurequantities as the check results using the search key) in which thefeature quantities of the victim and the suspect are detected, in eachof the areas. In addition, map controller 36 may deliver the search key,which is used to check the feature quantities of the images inmonitoring cameras 10, to communication device 31. Also, the search keyincludes, for example, time information, in which the images where thefeature quantities of the victim and the suspect are detected arecaptured, and camera location information. The map may be displayedafter being divided for each area, or may be displayed after beingdivided for each capturing time zone.

List controller 35 generates list information based on the determinationresult of high frequency determination processor 34 and the check resultof feature checker 33, and displays the list information on display 39.The list indicates at least a part of the feature quantities of theimages in which the feature quantities of the victim and the suspect aredetected. In the list, at least a part of the feature quantities of theimages in which the feature quantities of the victim and the suspect aredetected may be displayed only for the high frequency area. In addition,list controller 35 may deliver the search key, which is used to checkthe feature quantities of the images in monitoring cameras 10, tocommunication device 31. The list may be displayed after being dividedfor each area, or may be divided after being divided for each capturingtime zone.

Memory 37 includes a primary storage device such as a ROM or a RAM. Inaddition, memory 14 may include a secondary storage device, such as anHDD and an SSD, and a tertiary storage device such as a USB memory or anSD card. Memory 37 stores various data.

Input device 38 includes, for example, a mouse, a keyboard, a touchpanel, a microphone, and the like. Input device 38 inputs various datathrough a user manipulation or the like.

Display 39 includes, for example, a Liquid Crystal Display (LCD), anddisplays various data (for example, the images based on the videosignals).

[Operation or the Like]

Subsequently, an operation of monitoring system 5 will be described.FIGS. 5 and 6 are sequence diagrams illustrating the operation ofmonitoring system 5. Here, as an example, it is assumed that akidnapping incident occurs and suspect searching is performed in apolice station which is a head office.

First, management device 30 in head office HO transmits a search keywhich is previously input to each of monitoring cameras 10A in area RAthrough communication device 31 (S1). It is assumed that the search keyis transmitted to monitoring cameras 10A in area RA which is an areawhere the victim is normally located. An area where the victim isnormally located is estimated (area estimation) based on a place wherethe victim is last seen, a zone of life of the victim, a place where aGPS signal is last transmitted from a mobile phone (for example, a smartphone, a mobile phone, or crime prevention equipment) which is possessedby the victim, a history in which facilities for transportation areused, a history in which a cash dispenser is used, or the like.

The search key, which is transmitted in Si, is the feature quantity ofthe victim, and includes, for example, a facial image of the victim, acolor or a shape of clothes, a full-length image, and height. Thefeature quantity is an example of information which is acquired in sucha way that a police officer asks a family of the victim. The policeofficer inputs the feature quantity as the search key to managementdevice 30 through input device 38 or the like in advance.

In a case where each of monitoring cameras 10A receives the search key,which is transmitted from management device 30 through communicationdevice 15, each of monitoring cameras 10A stores the search key insearch key storage unit 25 within memory 14 (S2).

Also, management device 30 may transmit, for example, an image which iscaptured by a digital camera of the family of the victim, to each ofmonitoring cameras 10A, and feature detector 21 of each of monitoringcameras 10A may extract the feature quantity from the received image.The feature quantity may be stored in search key storage unit 25 withinmemory 14.

Feature checker 22 of each of monitoring cameras 10A checks (performsthe victim check) the feature quantity stored in feature storage unit 24and the feature quantity stored in search key storage unit 25 (S3).

In a case where the feature quantities are consistent and a check resultindicative of the same person is acquired, each of monitoring cameras10A transmits the check result (also referred to as a victim checkresult) to management device 30 through communication device 15 (S4).The victim check result includes information such as a camera number ofeach of monitoring cameras 10A which perform capturing, capturing time,the facial image of the victim, the full-length image, the height, andthe like. Here, the facial image and the full-length image correspond tothumbnails (reduced images). In a case where the thumbnail is used, itis possible to reduce the amount of data, thereby reducing traffic.

In a case where communication device 31 of management device 30 receivesthe victim check results which are transmitted from monitoring cameras10, map controller 36 displays map information MA, in which the victimcheck results are reflected, on display 39 (S5).

FIG. 7 is a diagram illustrating map information MA, in which the victimcheck results with respect to the feature quantity of the victim arereflected, in a time series. In map information MA, the camera locationsof monitoring cameras 10A, which transmit the victim check resultsindicative of detection of the feature quantity of the victim, areindicated by symbols “×” in area RA. Also, the camera locations whichare indicated by symbols “×” include correct information in which thefeature quantity of the victim is correctly detected and incorrectinformation in which the feature quantity of the victim is wronglydetected.

For example, in area RA, in a case where the camera locations ofmonitoring cameras 10A which detect the feature quantity of the victimare unevenly gathered (maldistributed) in a prescribed area, a featurequantity detection result within the area is probable, thereby beingdetermined as the correct information. In contrast, in area RA, in acase where the camera locations of monitoring cameras 10A which detectthe feature quantity of the victim are independently located on theoutside of the maldistributed area, the feature quantity detectionresult is unreliable, thereby being determined as the incorrectinformation.

Specifically, in the map information between 12 and 13 o'clock of FIG.7, a large number of camera locations are gathered in a range surroundedby dotted-line frame h0 in area RA. In this case, feature quantitydetection results acquired by monitoring cameras 10A which exist in therange surrounded by dotted-line frame h0 are determined as the correctinformation. In contrast, a camera location indicated by symbol i0 isindependent from other camera locations. In this case, a featurequantity detection result acquired by monitoring camera 10A, whichexists in the location indicated by symbol i0, is determined as theincorrect information. Dotted-line frame h0 may or may not be displayedon display 39.

In the map information between 13 and 14 o'clock of FIG. 7, a largenumber of camera locations are gathered in a range surrounded bydotted-line frame h1 in area RA. In this case, the feature quantitydetection results acquired by monitoring cameras 10A which exist in therange surrounded by the dotted-line frame h1 are determined as thecorrect information. In contrast, five camera locations exist in placeswhich are separated from the dotted-line frame h1, and the cameralocations are independent from other camera locations. In this case, thefeature quantity detection results acquired by monitoring cameras 10Awhich exist in the location indicated by symbol i1 is determined as theincorrect information. Dotted-line frame h1 may or may not be displayedon display 39.

As described above, in addition, since the location of dotted-line frameh0 is different from the location of dotted-line frame h1 in area RA,and thus map controller 36 can estimate that the victim is moving inarea RA.

In the map information between 14 and 15 o'clock of FIG. 7, themaldistributed camera locations do not exist in area RA. Accordingly,the feature quantity detection results acquired by monitoring cameras10A in area RA are determined that there is no correct information.Therefore, map controller 36 can estimate that there is a highpossibility that the victim is separated from area RA between 14 and 15o'clock. In this case, processes in S1 to S5 may be performed withrespect to an area which is adjacent to area RA, for example, area RB.

Display 39 displays the map information between 12 and 13 o'clock,between 13 and 14 o'clock, and between 14 and 15 o'clock. In this case,display 39 may switch and display map information between 12 and 13o'clock, between 13 and 14 o'clock, and between 14 and 15 o'clockaccording to a user instruction through input device 38, maysequentially switch and display like slide show, or may simultaneouslydisplay the map information of all time zones.

High frequency determination processor 34 in management device 30determines the high frequency area with respect to the map informationdisplayed in S5 according to the above-described clustering algorithm(S6). As a result of the high frequency area determination, for example,information of monitoring cameras 10A, which exist in dotted-line frameh1 included in the map information between 13 and 14 o'clock illustratedin FIG. 7, is extracted.

List controller 35 displays the information of monitoring cameras 10A inthe high frequency area (for example, in dotted-line frame h1), which isdetermined by high frequency determination processor 34, on display 39in a form of a list (table) (S7). Also, the information of monitoringcameras 10A in the high frequency area may be displayed in a form otherthan the list.

FIG. 8 is a table illustrating victim list LS1 in the high frequencyarea. In victim list LS1, for example, capturing time (“date and time”in FIG. 8), a camera number, a facial image, a full-length image,height, and a correct answer check item are set. In victim list LS1, forexample, date and time: “13:22”, camera number “No. 3”, a facial imageof a victim, a full-length image of the victim, height, and a correctanswer check are registered in a table as the information of monitoringcameras 10A between 13 and 14 o'clock.

The correct answer check is an item which is acquired in such a way thata police officer who belongs to head office HO checks the victim bylooking and adds a result thereof using a check mark. Looking by thepolice officer and adding of the check mark are performed through, forexample, input device 38 and display 39 of management device 30. In acase where the check mark is added, list controller 35 determines thatvictim information is correct. In contrast, in a case where the checkmark is not added, list controller 35 determines that the victiminformation is wrong. The correct answer check item may be omitted.

In victim list LS1 illustrated in FIG. 8, the victim information isregistered through four dates and times. Particularly, victiminformation, which is monitored in the last time is the most importantinformation for searching for the suspect. The reason for this is thatthe last time is conceivable as the closest to a current time situation.

List controller 35 transmits capturing time information as the searchkey with respect to monitoring cameras 10A which are registered invictim list LS1, and requests to transmit the feature quantities ofpeople included in images captured in fixed time (for example, 1 minute)from the capturing time (S8).

For example, list controller 35 orders monitoring camera 10Acorresponding to camera number “No. 4” registered in victim list LS1 totransmit the feature quantities of all the people who are capturedwithin 5 minutes before and after capturing time 13:59. Communicationdevice 31 transmits the feature quantities of all the people under thecontrol of list controller 35.

In a case where monitoring camera 10A receives the capturing timeinformation as the search key from management device 30, monitoringcamera 10A stores the capturing time information in search key storageunit 25 within memory 14 (S9).

Feature checker 22 checks (performs the time check) capturing timeincluded in the feature quantity which is stored in feature storage unit24 and the capturing time as the received search key (S10).

In a case where both the capturing times in S10 are consistent with eachother, communication device 15 transmits the feature quantities, such asfacial images, full-length images, or height, of all the people who arecaptured in the fixed time (for example, before and after 5 minutes)from the capturing time as a check result (also referred to as timecheck result) to management device 30 (S11).

In management device 30, communication device 31 receives the featurequantities of all the people in the fixed time as the time check resultfrom monitoring camera 10A, and feature checker 33 performs a mutualchecking process (S12). In the mutual checking process, the same personwho is photographed in each image in the fixed time is checked for eachperson. For example, in a case where 100 images exist, a featurequantity of a first image and feature quantities of second to 100-thimages are checked, and the feature quantity of the second image and thefeature quantities of the third to 100-th images are checked.Hereinafter, fourth and fifth images are also continuously checked bythe same procedure. For example, it is determined that the same personis photographed in the first, fifth, and tenth images.

List controller 35 prepares a same person list LS2, in which a number ofappearing times (clustering number) are listed in units of the sameperson in ascending order (in order of the number of times ofappearances) as a result of the mutual checking process, and displayssame person list LS2 on display 39 (S13). Also, a format of same personlist LS2 is arbitrary, and may be prepared using another method.

FIG. 9 is a table illustrating same person list LS2. In same person listLS2, sorting is performed in an ascending order of the clusteringnumber, and a suspect candidate counted as the same person and theclustering number are registered. In FIG. 9, in a first row, “person paand 22 times” are registered. In a second row, “person pb and 3 times”are registered. In a third row, “person pc and 2 times” are registered.

List controller 35 in management device 30 specifies a person who hasthe largest clustering number (the largest number of times ofappearances) as the suspect. This is based on estimation in which aperson who has an extremely large clustering number, that is, a personwho was with the victim and is not known is a suspect.

Also, it is assumed that the family of the victim was with the victimmany times in addition to the suspect. In this case, the clusteringnumber of the family may be the largest. Accordingly, setting may beperformed such that the family of the victim is excluded from thesuspect candidate through input device 38 or display 39 of managementdevice 30. The setting may be performed in such a way that, for example,the thumbnail images displayed on display 39 are recognized by the userand the correct answer check item is used.

List controller 35 transmits the feature quantity of the same person whohas the largest clustering number, that is, the suspect as the searchkey to each of monitoring cameras 10 which are installed in each of wideareas RA, RB, and RC including area RA (S14). Also, although an examplein which wide areas RA, RB, and RC are set to transmission targets isprovided, only area RA may be set to the transmission target, only areasRA and RB may be set to the transmission targets, or another area may beincluded.

Each of monitoring cameras 10, which are installed in wide areas RA, RB,and RC, maintains information of the feature quantity of the suspect,which is received from management device 30 by communication device 15,as the search key in search key storage unit 25 (S15).

Feature checker 22 checks (performs a suspect check) the featurequantity of the suspect stored in feature storage unit 24 and thefeature quantity of the suspect as the received search key (S16).

In a case where both the feature quantities of the suspect areconsistent with each other in S16 and a check result indicative of thesame person is acquired, communication device 15 transmits the checkresult (suspect check result) indicative of the same person as thesuspect to management device 30 (S17). As the suspect check result, forexample, information relevant to the feature quantity, such as athumbnail image (a facial image or a full-length image), a color ofclothes, or height, of the suspect is transmitted in addition to thecamera number and the capturing time.

In a case where map controller 36 receives the suspect check result fromeach of the monitoring cameras 10 through communication device 31, mapcontroller 36 prepares map information MB in which the suspect checkresult is reflected, and displays map information MB on display 39(S18).

Display 39 displays map information MB of areas RA, RB, and RC. In thiscase, display 39 may switch and display map information MB of each areaaccording to the user instruction through input device 38, maysequentially switch and display map information MB of each of the areaslike slide show, and may simultaneously display map information MB ofall the areas.

High frequency determination processor 34 determines the high frequencyarea according to the above-described clustering algorithm based oninformation relevant to the feature quantity of the suspect, whichincludes the camera number and the capturing time of monitoring camera10, and reflects the high frequency area in map information MB (S19).

FIG. 10 is a diagram illustrating map information MB. In map informationMB, the locations of monitoring cameras 10, which are installed for eachof areas RA, RB, and RC and monitor the suspect, are indicated by symbol“×”. Here, the wide area includes areas RB and RC, which are adjacent toarea RA, in addition to area RA. In map information MB of area RB, thehigh frequency area, which is indicated by dotted-line frame h2, isincluded. Map controller 36 estimates that the suspect exits in the highfrequency area which is indicated by dotted-line frame h2. Also, thehigh frequency area is, for example, a main life area of the suspect.

List controller 35 prepares a suspect list LS3 in which informationrelevant to the feature quantity of the suspect in the high frequencyarea is listed for each capturing time, and displays suspect list LS3 ondisplay 39 (S20).

FIG. 11 is a table illustrating suspect list LS3 in the high frequencyarea. In suspect list LS3, items, such as capturing time (“date andtime” in FIG. 11), a camera number, a facial image, a full-length image,and height, are set. Also, in FIG. 11, suspect list LS3 does not includethe correct answer check item as illustrated in FIG. 8. However, suspectlist LS3 may include the correct answer check item. A method of checkingthe correct answer check is the same as in the case of FIG. 8.

A police officer can grasp a current characteristic of the suspect (forexample, appearance or features) and a location of the suspect fromcontent of suspect list LS3 displayed on display 39.

Accordingly, in head office HO, the police officer can grasp the lasttime and area, which are estimated that the victim is located, based onthe last victim capturing date and time (for example, “13:59”) and thearea (for example, area RB) which are registered in victim list LS1. Inaddition, the police officer can grasp the suspect based on the featurequantity of the suspect specified in same person list LS2. In addition,the police officer can grasp an area which is estimated that the suspectis located based on the high frequency area included in map informationMB. Accordingly, head office HO can dispatch an investigator to the areawhich is estimated that the suspect is located. The investigator cansearch for the suspect based on the newest information of the suspectwhich is registered in suspect list LS3. Therefore, rapid incidentsettlement is expected.

Also, a mobile terminal (for example, a smart phone or a tabletterminal) which has a function of management device 30 may be possessedsuch that the investigator and another police officer can shareinformation included in management device 30. The mobile terminal may beconnected to management device 30 through, for example, network 50, andmay be used as a cloud terminal. Furthermore, the mobile terminal itselfmay have each function, and may perform a process of realizing afunction of management device 30. Therefore, the investigator canindependently acquire the newest information of the suspect and thevictim at a search spot.

[Advantages]

As described above, monitoring system 5 according to the embodimentincludes a plurality of monitoring cameras 10 which capture images, andmanagement device 30 to which monitoring cameras 10 are connected.Management device 30 transmits first feature information (for example,the search key, the feature quantity of the victim) relevant to a firstperson (for example, the victim) to one or more first monitoring cameras(for example, monitoring cameras 10 which are installed in area RA).Each of the first monitoring cameras performs a first check (forexample, the victim check) with respect to a first image, which iscaptured by the first monitoring cameras (self-monitoring cameras) usingthe received first feature information, and transmits a first checkresult to management device 30. Management device 30 transmits timeinformation (for example, capturing time information as the search key)based on time (for example, time in which the victim is lastlycaptured), in which the first image including the first person iscaptured, to second monitoring cameras (for example, monitoring camera10 which performs capturing at 13:59 and has a camera number “4”, andmonitoring camera 10 which performs capturing at 13:22 and has a cameranumber “2”), which capture the first image relevant to the timeinformation, among the first monitoring cameras based on the first checkresult. Each of the second monitoring cameras performs a second check(for example, the time check) with respect to a second image, which iscaptured by the second monitoring cameras (self-monitoring cameras),using the received time information, and transmits a second check resultto management device 30. Management device 30 specifies a second person(for example, the suspect) based on the second check result.

Therefore, monitoring system 5 can specify the victim and the suspect insuch a way that monitoring cameras 10 cooperate with management device30, and can rapidly do a search. In addition, monitoring system 5 canestimate the suspect by collectively extracting people who are locatedaround the victim based on the victim check. In addition, in a casewhere monitoring cameras 10 receive the search key from managementdevice 30 and perform various checking processes with respect to thecaptured image, it is possible to reduce a processing load of managementdevice 30 for searching for the victim and the suspect and it ispossible to rapidly detect the victim and the suspect, compared to acase where management device 30 performs the various checks. Inaddition, in a case where the time check is performed using the timeinformation, it is possible to search for suspect candidates based on,for example, time in which the victim is captured. In addition, in acase where the processing load of management device 30 is reduced, it ispossible to avoid a situation in which the checking process performed bymanagement device 30 is not in time and thus the suspect escapes even ina case where, for example, a specific person is traced using theplurality of monitoring cameras 10, unlike the case of Japanese PatentUnexamined Publication No. 2005-323046.

In addition, in a case where, for example, the images which are capturedby monitoring cameras 10 are high-quality images (for example, 4Kimages), the amount of data of the images increases. Therefore, there isa possibility that network traffics become excessive in a case ofcommunicating the captured images. In contrast, monitoring cameras 10are capable of performing processes relevant to various checks in thedevice, and communicate with management device 30 only for the metadataand the feature quantities which are relevant to the images. Therefore,it is possible to avoid the network traffics becoming excessive.

In addition, management device 30 may transmit second featureinformation (for example, the search key and the feature quantity of thesuspect) relevant to the specified second person to one or more thirdmonitoring cameras (f_(o)r example, monitoring cameras 10 installed inareas RA, RB, and RC) including the first monitoring cameras. Each ofthe third monitoring cameras may perform a third check (for example,suspect check) with respect to a third image, which is captured by thethird monitoring cameras (self-monitoring cameras), using the receivedsecond feature information, and may transmit a third check result tomanagement device 30.

Therefore, monitoring system 5 can estimate a current location in whichthe suspect is located from the locations of monitoring cameras 10.Accordingly, investigators easily search for the suspect.

In addition, each of the first monitoring cameras may perform the firstcheck of detecting a feature quantity of the first person from the firstimage and checking the first feature information and the featurequantity of the first person. Each of the second monitoring cameras mayperform the second check of checking the time information and time inwhich the second image where the feature quantity of the first person isdetected is captured. Each of the third monitoring cameras may performthe third check of detecting the feature quantity of the second personfrom the third image and checking the second feature information and thefeature quantity of the second person.

Therefore, in monitoring system 5, each of the checking processes isperformed by monitoring cameras 10 instead of management device 30, andthus it is possible to reduce the processing load of management device30. In addition, monitoring system 5 can be realized withouttransmitting data to management device 30 in order to perform each ofthe checks, and it is possible to reduce the amount of data to betransmitted to management device 30, and thus it is possible to reducethe amount of traffic of network 50.

As described above, in a case where processes, such as the featuredetection and the feature quantity check, are performed with respect tothe image, which is captured by monitoring cameras 10, it is possible toreduce the processing load of management device 30 of head office HO. Inaddition, it is possible to rapidly perform a process by monitoringcameras 10, and thus it is possible to search for the specific person(the victim or the suspect) from the images captured by a large numberof monitoring cameras 10 in a short time.

In addition, management device 30 may display (for example, display in aform of a map) a location of each of the first monitoring cameras, whichcapture the first image including the first person who coincides withthe first feature information, on display 39 based on the first checkresult.

Therefore, the user (for example, the police officer) of managementdevice 30 can intuitively grasp the date and time, the time, and thelocation in which the victim is located from the map informationdisplayed on display 39.

In addition, management device 30 may display the location of each ofthe first monitoring cameras, which capture the first person whocoincides with the first feature information, for each capturing time(for example, between 12 and 13 o'clock, between 13 and 14 o'clock, andbetween 14 and 15 o'clock).

Therefore, the user of management device 30 can intuitively grasp alocation where the victim (an example of the first person) is locatedfor each time. In addition, in a case where the location of the victimis changed for each time, the user of management device 30 can recognizethat the victim is moving. In addition, in a case where the location ofthe victim is regularly changed for each time (for example, the victimmoves at an equal distance), the user of management device 30 canestimate a movement destination of the victim.

In addition, management device 30 may display (for example, display inthe form of the map) a location of each of the third monitoring cameras,which capture the second person who coincides with the second featureinformation, on a display based on the third check result.

Therefore, the user of management device 30 can intuitively grasp thedate and time, the time, and the location, in which the suspect islocated, from the map information displayed on display 39.

In addition, in monitoring system 5, one or more monitoring cameras (forexample, monitoring cameras 10A, 10B, and 10C) may be installed in eachof a plurality of areas (for example, areas RA, RB, and RC). Managementdevice 30 may display the location of each of the third monitoringcameras, which capture the second person who coincides with the secondfeature information, for each area.

Therefore, the user of management device 30 can suppose a location wherethe suspect (an example of the second person) is maldistributed andlocated among all the plurality of areas. For example, an area where thesuspect is maldistributed may be estimated as the main life area of thesuspect. The user of management device 30 can dispatch the investigatorto the area.

In addition, the first check result may include at least one of thelocation of each of the first monitoring cameras (for example, thelocations of monitoring cameras 10 which capture a person who coincideswith the victim), a thumbnail image of the first image, and informationof time in which the first image is captured. In a case where thelocation of each of the first monitoring cameras is maldistributed in afirst area (for example, the area surrounded by dotted-line frame h1),management device 30 may display (for example, display in the form ofthe list) the first check result acquired by the first monitoringcameras installed in the first area.

Therefore, the user of management device 30 can grasp a person who isconsidered as the victim with reference to the list informationdisplayed on display 39. For example, a location which is lastlycaptured by the first monitoring cameras becomes a last location of thevictim, and thus it is possible to estimate that the victim is currentlylocated around the last location. In addition, it is possible to graspthe feature of the victim with reference to the first check result, andthe user of management device 30 becomes easy to perform search orbecomes easy to instruct the search. In addition, in a case where thethumbnail image is transmitted and received between management device 30and monitoring cameras 10, it is possible to reduce data transmissionquantity between management device 30 and monitoring camera 10, comparedto a case in which a moving image is transmitted and received.

In addition, the third check result may include at least one of thelocation of each of the third monitoring cameras (for example, thelocation of each of monitoring cameras 10 which capture a person whocoincides with the suspect), a thumbnail image of the third image, andinformation of time in which the third image is captured. In a casewhere the location of each of the third monitoring cameras ismaldistributed in a second area (for example, the area surrounded bydotted-line frame h2), management device 30 may display (for example,display in the form of the list) the third check result acquired by eachof the third monitoring cameras installed in the second area.

Therefore, the user of management device 30 can grasp a person who isconsidered as the suspect with reference to the list informationdisplayed on display 39. For example, there is a high possibility thatthe victim is located around a location which is frequently captured bythe third monitoring cameras. In addition, the user of management device30 can grasp the feature of the suspect with reference to the thirdcheck result. Therefore, the user of management device 30 becomes easyto perform search or becomes easy to instruct the search.

In addition, management device 30 may display the number of times ofappearances for each person (for example, person a, b, or c) who appearsin the second image on display 39, and may specify the second personbased on the largest number of times of appearances.

In the second image, for example, the victim is photographed, and thereis a high possibility that the suspect who is frequently photographed inthe image is a person who is related to the victim. Therefore, the userof management device 30 can rapidly grasp a person who is considered asthe suspect.

In addition, monitoring cameras 10 may be installed in each of aplurality of areas. An area (for example, area RA, RB, or RC) in whichthe third monitoring cameras are installed may be wider than an area inwhich the first monitoring cameras are installed (for example, area RA).

Therefore, it is possible to search for the suspect in an area widerthan the area estimated that the victim is located. Accordingly, even ina case where the suspect moves between areas, there is a highpossibility that it is possible to search for the suspect, and it isdifficult for the suspect to run away.

In addition, each of monitoring cameras 10 includes image sensor 11,processor 13, and communication device 15. Image sensor 11 captures animage of a first person (for example, the victim). Processor 13 detectsa feature quantity of the first person from the image. Communicationdevice 15 receives first feature information relevant to the firstperson (for example, the search key or the feature quantity of thevictim) from management device 30. Processor 13 performs a first check(for example, the victim check) of checking the first featureinformation and the feature quantity of the first person. Communicationdevice 15 transmits a first check result to management device 30.

Therefore, each of monitoring cameras 10 can specify the victim and canrapidly do a search in association with management device 30. Inaddition, each of monitoring cameras 10 performs various checkingprocesses with respect to the captured image, and thus it is possible toreduce the processing load of management device 30 in order to searchfor the victim and it is possible to rapidly detect the victim, comparedto a case where the management device performs various checks.

In addition, processor 13 may detect the feature quantity of a secondperson (for example, the suspect) from the image. Communication device15 may receive time information (for example, the search key) based ontime (for example, time in which the victim is lastly captured) in whichthe image including the first person is captured. Processor 13 mayperform a second check (for example, the time check) of checking thetime information and the feature quantity of the second person.Communication device 15 may transmit a second check result to managementdevice 30.

Therefore, each of monitoring cameras 10 can specify the suspect and canrapidly do a search in association with management device 30. Inaddition, each of monitoring cameras 10 performs various checkingprocesses with respect to the captured image. Therefore, compared to acase where the management device performs various checks, it is possibleto reduce the processing load of management device 30 in order to searchfor the suspect and it is possible to rapidly detect the suspect. Inaddition, each of monitoring cameras 10 performs the time check usingthe time information. Therefore, it is possible to search for suspectcandidates based on, for example, time in which the victim is captured.

In addition, management device 30 includes processor 32 andcommunication device 31. Communication device 31 transmits first featureinformation (for example, the search key or the feature quantity of thevictim) relevant to a first person (for example, the victim) to one ormore first monitoring cameras (for example, monitoring cameras 10 whichare installed in area RA). Communication device 31 receives a firstcheck (for example, the victim check) result using the first featureinformation from each of the first monitoring cameras. Communicationdevice 31 transmits time information (for example, the capturing timeinformation as the search key) based on time (for example, time in whichthe victim is lastly captured), in which a first image including thefirst person is captured, to second monitoring cameras (for example,monitoring camera 10 which performs capturing at 13:59 and correspondsto camera number “4”, and monitoring camera 10 which performs capturingat 13:22 and corresponds to camera number “2”), which capture the firstimage relevant to the time information, among the first monitoringcameras based on the first check result. Communication device 31receives a second check (for example, the time check) result from eachof the second monitoring cameras using the time information. Processor32 specifies a second person (for example, the suspect) based on thesecond check result.

Therefore, management device 30 can specify the victim and the suspect,and can rapidly do a search in association with monitoring cameras 10.In addition, management device 30 entrusts the various checkingprocesses with respect to the captured image to monitoring cameras 10.Therefore, compared to a case where management device 30 performs thevarious checks, it is possible to reduce the processing load ofmanagement device 30 in order to search for the victim and the suspectand it is possible to rapidly detect the suspect.

Another Embodiment

As described above, the first embodiment is described as an example of atechnology of the present disclosure. However, the technology in thepresent disclosure is not limited thereto, and can be applied to anembodiment in which changes, replacements, additions, omissions, and thelike are performed.

In the first embodiment, an example in which the feature quantity of theperson included in the image is detected is provided. However, a featurequantity (for example, a type of a vehicle, a length of the vehicle, acolor of the vehicle, or a vehicle speed) of a subject (for example, thevehicle) other than the person may be detected.

For example, processor 32 may determine a range of the wide areaaccording to existence/non-existence of detection of the vehicle (thatis, use of the vehicle) in the image. For example, in a case where avehicle is detected, the range of the wide area may include areas RA,RB, RC, RD (not illustrated in the drawing), and RE (not illustrated inthe drawing) by considering a possibility that the suspect is moving ata high speed using a vehicle. In addition, in a case where a vehicle isnot detected, the wide area may include a range of areas RA and RB byconsidering that the suspect does not move too far.

In addition, processor 32 may determine the range of the wide areaaccording to the vehicle speed as the feature quantity. For example, ina case where a high-speed movement, in which the vehicle speed is equalto or faster than a prescribed speed, is detected, the range of the widearea may include areas RA, RB, RC, RD (not illustrated in the drawing),and RE (not illustrated in the drawing) by considering the possibilitythat the suspect is moving at a high speed using the vehicle. Inaddition, in a case where a low-speed movement, in which the vehiclespeed is slower than the prescribed speed, is detected, the wide areamay include the range of areas RA and RB by considering that a movementdistance by the vehicle is not too long.

In addition, processor 32 may determine the range of the wide areaaccording to a type of the vehicle, such as a car, a motorcycle, or abicycle.

In the first embodiment, an example in which processor 32 extracts anddisplays dotted-line frame h0, h1, or h2, which indicates the range ofthe high frequency area, according to the clustering algorithm, isprovided. However, the range of the high frequency area may be manuallyinput and display. For example, the camera locations, in which thefeature quantity is detected, may be visually recognized by display 39,and an area, which is considered that camera locations aremaldistributed at some extent or more, may be set as the high frequencyarea by input device 38.

In addition, in a case where dotted-line frame h0, h1, or h2 whichindicates the range of the high frequency area, is close to a peripheraledge of the area, a neighboring area, which is adjacent to the closeperipheral edge, may be designated as a search range for the victim andthe suspect. For example, since dotted-line frame h1 is close to theperipheral edge of area A (a distance from the peripheral edge isincluded in a prescribed distance) between 13 and 14 o'clock, processor32 may cause monitoring cameras 10B installed in area B to extract thefeature quantity between 14 and 15 o'clock, together with monitoringcameras 10A installed in area A.

In the first embodiment, an example is provided in which processor 32requests to transmit the feature quantity of the image to managementdevice 30 in fixed time (for example, capturing time between 13 and 14o'clock and before and after five minutes from time in which the imageincluding the victim is lastly captured) from time in which the victimis recognized in the image captured by each of monitoring cameras 10.Also, processor 32 may request to transmit the feature quantity of theimage, which is captured in a fixed distance (for example, in aprescribed distance from a location where the image including the victimis lastly captured) from a location where the victim is recognized inthe image captured by each of monitoring cameras 10, to managementdevice 30. In addition, processor 32 may request to transmit the featurequantity of the image, which is captured in the fixed time and in thefixed distance, to management device 30.

In addition, processor 32 may calculate a distance from coordinates(image location) of the captured image by considering a location in adepth direction of the image (captured image) captured by each ofmonitoring cameras 10. For example, in a case where the image isrecognized that the victim and the suspect exist on a forefront side ofthe captured image, a distance on the image of the captured image ismultiplied by a relatively small value, and thus an actual (actualspace) distance is drawn. For example, in a case where the image isrecognized that the victim and the suspect exist on a back side of thecaptured image, the distance on the image of the captured image ismultiplied by a relatively large value, and thus an actual (actualspace) distance is drawn. Therefore, it is possible to draw a locationon the actual space according to a three-dimensional location of thecaptured image, and thus the user can grasp a sense of distance inactual space. Accordingly, search for the victim and the suspect by theinvestigator becomes easy.

In the first embodiment, an example in which one or zero high frequencyarea exists in each area is provided. However, two or more highfrequency areas may exist in one area.

In the first embodiment, processor 13 or 32 may be physically formed inany manner. In addition, in a case where programmable processor 13 or 32is used, it is possible to change processing content by changing theprogram, and thus it is possible to increase a degree of freedom fordesign of processor 13 or 32. Processor 13 or 32 may be formed by onesemiconductor chip, or may be physically formed by a plurality ofsemiconductor chips. In a case where processor 13 or 32 is formed by theplurality of semiconductor chips, respective controls according to thefirst embodiment may be realized by the respective separatesemiconductor chips. In this case, it is possible to consider that oneprocessor 13 or 32 is formed by the plurality of semiconductor chips. Inaddition, processor 13 or 32 may be formed by a member (capacitor or thelike) which has a separate function from the semiconductor chips. Inaddition, one semiconductor chip may be formed to realize a function ofprocessor 13 or 32 and another additional function.

The present disclosure is available for a monitoring system, amonitoring camera, and a management device, in which it is possible toreduce a processing load of the management device and it is possible torapidly detect a specific person.

What is claimed is:
 1. A monitoring system comprising: a plurality of monitoring cameras that capture images; and a management device that is connected to the monitoring cameras, wherein the management device transmits first feature information relevant to a first person to one or more first monitoring cameras, wherein each of the first monitoring cameras performs a first check with respect to a first image, which is captured by the first monitoring cameras, using the received first feature information, and transmits a first check result to the management device, wherein the management device transmits time information based on time, in which the first image including the first person is captured, to second monitoring cameras, which capture the first image relevant to the time information, among the first monitoring cameras based on the first check result, wherein each of the second monitoring cameras performs a second check with respect to a second image, which is captured by the second monitoring cameras, using the received time information, and transmits a second check result to the management device, and wherein the management device specifies a second person based on the second check result.
 2. The monitoring system of claim 1, wherein the management device transmits second feature information relevant to the specified second person to one or more third monitoring cameras including the first monitoring cameras, and wherein each of the third monitoring cameras performs a third check with respect to a third image, which is captured by the third monitoring cameras, using the received second feature information, and transmits a third check result to the management device.
 3. The monitoring system of claim 2, wherein each of the first monitoring cameras performs the first check of detecting a feature quantity of the first person from the first image and checking the first feature information and the feature quantity of the first person, wherein each of the second monitoring cameras performs the second check of checking the time information and time in which the second image where the feature quantity of the first person is detected is captured, and wherein each of the third monitoring cameras performs the third check of detecting the feature quantity of the second person from the third image and checking the second feature information and the feature quantity of the second person.
 4. The monitoring system of claim 1, wherein the management device displays a location of each of the first monitoring cameras, which capture the first image including the first person who coincides with the first feature information, on a display based on the first check result.
 5. The monitoring system of claim 4, wherein the management device displays the location of each of the first monitoring cameras, which capture the first person who coincides with the first feature information, for each capturing time in which the first image is captured.
 6. The monitoring system of claim 2, wherein the management device displays a location of each of the third monitoring cameras, which capture the second person who coincides with the second feature information, on a display based on the third check result.
 7. The monitoring system of claim 6, wherein one or more the monitoring cameras are installed in each of a plurality of areas, and wherein the management device displays the location of each of the third monitoring cameras, which capture the second person who coincides with the second feature information, for each area.
 8. The monitoring system of claim 4, wherein the first check result includes at least one of the location of each of the first monitoring cameras, a thumbnail image of the first image, and information of time in which the first image is captured, and wherein, in a case where the location of each of the first monitoring cameras is maldistributed in a first area, the management device displays the first check result acquired by each of the first monitoring cameras installed in the first area.
 9. The monitoring system of claim 6, wherein the third check result includes at least one of the location of each of the third monitoring cameras, a thumbnail image of the third image, and information of time in which the third image is captured, and wherein, in a case where the location of each of the third monitoring cameras is maldistributed in a second area, the management device displays the third check result acquired by each of the third monitoring cameras installed in the second area.
 10. The monitoring system of claim 1, wherein the management device displays the number of times of appearances for each person who appears in the second image on a display, and specifies the second person based on the largest number of times of appearances.
 11. The monitoring system of claim 2, wherein the monitoring cameras are installed in each of a plurality of areas, and wherein an area in which the third monitoring cameras are installed is wider than an area in which the first monitoring cameras are installed.
 12. A monitoring camera, which is connected to a management device and captures an image, comprising: an image sensor; a processor; and a communication device, wherein the image sensor captures an image of a first person, wherein the processor detects a feature quantity of the first person from the image, wherein the communication device receives first feature information relevant to the first person from the management device, wherein the processor performs a first check of checking the first feature information and the feature quantity of the first person, and wherein the communication device transmits a first check result to the management device.
 13. The monitoring camera of claim 12, wherein the processor detects the feature quantity of a second person from the image, wherein the communication device receives time information based on time in which the image including the first person is captured, wherein the processor performs a second check of checking the time information and the feature quantity of the second person, and wherein the communication device transmits a second check result to the management device.
 14. A management device, which is connected to monitoring cameras, comprising: a processor; and a communication device, wherein the communication device transmits first feature information relevant to a first person to one or more first monitoring cameras, receives a first check result using the first feature information from each of the first monitoring cameras, transmits time information based on time, in which a first image including the first person is captured, to second monitoring cameras, which capture the first image including the first person, among the first monitoring cameras based on the first check result, receives a second check result from the second monitoring cameras using the time information, and wherein the processor specifies a second person based on the second check result. 